
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/323830333a643235303a3a2f33322d3438203d3e20323733313637.roa
File: 323830333a643235303a3a2f33322d3438203d3e20323733313637.roa (raw, json)
Hash identifier: zqMMKCkFdouQccillLfonx6zoQUGUVMhftJE8TOMWWc=
Subject key identifier: F3:51:BE:B8:46:D5:ED:14:B6:06:A8:57:4D:60:9D:76:43:11:A8:C5
Certificate issuer: /CN=D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD
Certificate serial: 7F4D08F746157F53E764DA10193F3B9DB2270974
Authority key identifier: D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/323830333a643235303a3a2f33322d3438203d3e20323733313637.roa
Signing time: Wed 26 Feb 2025 20:15:00 +0000
ROA not before: Wed 26 Feb 2025 20:10:00 +0000
ROA not after: Wed 25 Feb 2026 20:15:00 +0000
asID: 273167
IP address blocks: 2803:d250::/32 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl
rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 29 Oct 2025 22:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:4d:08:f7:46:15:7f:53:e7:64:da:10:19:3f:3b:9d:b2:27:09:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD
Validity
Not Before: Feb 26 20:10:00 2025 GMT
Not After : Feb 25 20:15:00 2026 GMT
Subject: CN=F351BEB846D5ED14B606A8574D609D764311A8C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:f1:da:86:fe:c9:64:60:2b:90:4e:27:25:
fa:44:2d:ac:0a:17:11:37:46:f2:6e:9a:b3:6a:97:
69:5d:17:18:1b:9d:d0:b3:06:98:fd:8d:da:71:b8:
80:c4:61:58:7e:23:e4:8f:33:c0:53:4d:55:7f:e1:
c1:3c:94:7a:97:4d:89:ff:b2:2b:91:54:52:86:35:
8b:64:b1:42:4e:1b:3b:5f:bb:8b:5b:19:71:e8:67:
17:65:b8:76:7b:b6:20:ba:57:0e:c5:87:63:dc:4e:
fe:86:5e:0a:f8:d1:45:53:6b:ec:ee:ed:3b:30:4f:
d5:21:1b:33:56:47:36:05:02:d7:61:bf:03:db:99:
66:2b:70:88:fe:fd:38:bd:4f:16:e1:ec:3f:26:4a:
7b:91:05:60:43:17:13:b6:e9:3b:7d:2a:76:ee:89:
c2:bb:64:f5:f1:f9:e5:ca:7d:34:58:7b:43:af:2c:
d9:fa:cd:92:89:34:01:83:8b:12:55:27:20:29:76:
7d:77:1f:cb:f3:ce:72:86:60:7e:1d:4f:0f:66:cd:
d8:95:a2:d8:7b:68:33:bc:84:7b:ee:a8:6b:4a:20:
d1:13:4b:b7:91:d0:01:04:88:b4:d3:cb:79:08:6e:
27:be:ca:1d:60:a0:74:4b:fb:78:9d:0b:59:d5:e2:
82:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:51:BE:B8:46:D5:ED:14:B6:06:A8:57:4D:60:9D:76:43:11:A8:C5
X509v3 Authority Key Identifier:
keyid:D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/323830333a643235303a3a2f33322d3438203d3e20323733313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:d250::/32
Signature Algorithm: sha256WithRSAEncryption
d9:d9:db:a1:0b:a8:22:56:3b:a8:32:9f:e9:32:4d:94:1e:66:
cf:07:ca:63:d5:08:b6:56:01:38:80:e0:d2:0b:10:06:2c:49:
3b:28:52:22:7a:55:65:f3:c3:52:41:07:cb:ba:09:e0:83:db:
4d:29:8d:ca:33:a9:3a:fb:c7:49:ce:b0:a0:9e:91:29:77:a2:
98:7a:15:0d:87:1c:34:5a:58:13:e5:ef:d5:20:cf:82:35:1b:
69:d1:70:26:89:01:66:d8:ab:19:78:ea:f8:5a:22:c0:1b:1c:
d0:36:ed:ba:f3:e0:4e:96:1f:91:e0:83:ca:50:d7:88:27:5f:
4f:36:46:6c:f1:f4:85:1c:78:23:f3:c1:c0:d6:25:54:54:15:
0f:2b:c9:cd:1b:aa:f0:07:71:e1:5e:b9:10:89:1b:58:5c:67:
de:62:01:72:85:34:4e:be:2e:28:71:96:c7:7d:3c:30:18:65:
38:f0:3f:4a:03:25:c6:5f:9c:06:36:b6:16:82:66:9f:ee:b3:
fa:02:5d:f3:ad:18:ca:d1:e9:c1:98:43:35:cb:43:4d:d1:ae:
64:fa:47:f2:32:8a:73:81:55:11:40:90:98:99:a7:d4:1b:a0:
70:ea:15:58:7c:d9:7d:bc:24:13:be:2f:a8:ac:9e:ca:52:38:
c2:7f:76:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:26:11 2025 by rpki-client